The latest Security Vulnerabilities
– A security vulnerability in the Linux kernel’s USB networking subsystem could allow a locally present attacker to trigger a kernel panic on affected systems.
Read More– A critical security vulnerability has been discovered in CISA’s Malcolm network traffic analysis platform that could expose an administrative interface to unauthorised attackers.
Read More– A newly disclosed security vulnerability in MCPHub could allow attackers to bypass authentication and gain unauthorised access to systems using vulnerable versions of the software.
Read More– This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent.
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenAI Codex.
Read More– A newly disclosed security vulnerability in WWBN AVideo, an open-source video-sharing platform, could allow unauthenticated attackers to access sensitive information belonging to users and potentially hijack active sessions.
Read More– Tracked as CVE-2026-86197, the vulnerability is a cross-site scripting (XSS) flaw affecting Grav versions before 2.0.20. Security researchers have rated it Medium severity, with a CVSS 3.1 score of 5.4.
Read More– A newly disclosed critical security vulnerability in the open-source SadTalker project could allow unauthenticated attackers to execute arbitrary operating system commands on vulnerable servers.
Read More– Cisco has disclosed a high-severity vulnerability affecting a range of its IP and video phones that could allow an unauthenticated remote attacker to cause the devices to become unavailable.
Read More– The vulnerabilities, tracked as CVE-2026-19489 and CVE-2026-19490, affect NetScaler ADC and NetScaler Gateway, products widely used to provide application delivery, remote access and VPN services.
Read More
